CVE-2023-29984 Null dereference in n/a
Attackers can cause denial of service on MFPs and printers using Debut web server by sending specially crafted requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-29984?
CVE-2023-29984 is a high-severity vulnerability in n/a, published on 11 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor.
Weakness: CWE-476
Which versions are affected by CVE-2023-29984?
It affects 216 products.
Products include Brother Dcp-1610w Firmware, Brother Dcp-1610we Firmware, Brother Dcp-1610wr Firmware, Brother Dcp-1610wvb Firmware, Brother Dcp-1612w Firmware, Brother Dcp-1612we Firmware and 210 more.
How do I fix CVE-2023-29984?
No fix has been published for CVE-2023-29984 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-29984 being exploited?
There is no known exploitation of CVE-2023-29984 in the wild and no public exploit code.
Sources
Also known as GHSA-cf4r-5p5m-jqq2.